Apache Airflow vulnerabilities

CVE-2023-46288 [MEDIUM] CWE-200 CVE-2023-46288: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Airflow.This issu Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Airflow.This issue affects Apache Airflow from 2.4.0 to 2.7.0. Sensitive configuration information has been exposed to authenticated users with the ability to read configuration via Airflow REST API for configuration even when the expose_config option is set to non-s

CVE-2023-40611 [MEDIUM] CWE-863 CVE-2023-40611: Apache Airflow, versions before 2.7.1, is affected by a vulnerability that allows authenticated and Apache Airflow, versions before 2.7.1, is affected by a vulnerability that allows authenticated and DAG-view authorized Users to modify some DAG run detail values when submitting notes. This could have them alter details such as configuration parameters, start date, etc. Users should upgrade to version 2.7.1 or later which has removed the vulnerabil

CVE-2026-48891 [MEDIUM] CVE-2026-48891: A bug in Apache Airflow's `/ui/dependencies` scheduling graph endpoint applied the caller's readable A bug in Apache Airflow's `/ui/dependencies` scheduling graph endpoint applied the caller's readable-Dag filter to the top-level serialized Dag key but still emitted referenced Dag IDs through the `dep.source` and `dep.target` fields of trigger / sensor dependency entries. An authenticated UI user with read permission on some Dags could enumerate the identi

CVE-2026-28563 [MEDIUM] CWE-732 CVE-2026-28563: Apache Airflow versions 3.1.0 through 3.1.7 /ui/dependencies endpoint returns the full DAG dependenc Apache Airflow versions 3.1.0 through 3.1.7 /ui/dependencies endpoint returns the full DAG dependency graph without filtering by authorized DAG IDs. This allows an authenticated user with only DAG Dependencies permission to enumerate DAGs they are not authorized to view. Users are recommended to upgrade to Apache Airflow 3.1.8 or later, which reso

CVE-2026-38743 [MEDIUM] CWE-1220 CVE-2026-38743: The authenticated /ui/dags endpoint did not enforce per-DAG access control on embedded Human-in-the- The authenticated /ui/dags endpoint did not enforce per-DAG access control on embedded Human-in-the-Loop (HITL) and TaskInstance records: a logged-in Airflow user with read access to at least one DAG could retrieve HITL prompts (including their request parameters) and full TaskInstance details for DAGs outside their authorized scope. Because HITL p

CVE-2019-0216 [MEDIUM] CWE-79 CVE-2019-0216: A malicious admin user could edit the state of objects in the Airflow metadata database to execute a A malicious admin user could edit the state of objects in the Airflow metadata database to execute arbitrary javascript on certain page views.

CVE-2022-38170 [MEDIUM] CWE-732 CVE-2022-38170: In Apache Airflow prior to 2.3.4, an insecure umask was configured for numerous Airflow components w In Apache Airflow prior to 2.3.4, an insecure umask was configured for numerous Airflow components when running with the `--daemon` flag which could result in a race condition giving world-writable files in the Airflow home directory and allowing local users to expose arbitrary file contents via the webserver.

CVE-2023-45348 [MEDIUM] CWE-200 CVE-2023-45348: Apache Airflow, versions 2.7.0 and 2.7.1, is affected by a vulnerability that allows an authenticate Apache Airflow, versions 2.7.0 and 2.7.1, is affected by a vulnerability that allows an authenticated user to retrieve sensitive configuration information when the "expose_config" option is set to "non-sensitive-only". The `expose_config` option is False by default. It is recommended to upgrade to a version that is not affected.

CVE-2026-54183 [MEDIUM] CVE-2026-54183: Apache Airflow's secrets masker hides values stored under sensitive key names when they are displaye Apache Airflow's secrets masker hides values stored under sensitive key names when they are displayed in the UI. The masker's recursion-depth limit did not descend into values nested inside a list, tuple, or set beyond that limit, so an Airflow Variable holding such a deeply-nested value was shown unmasked in the Variables UI. The exposure is limited to the

CVE-2026-46764 [MEDIUM] CWE-639 CVE-2026-46764: The Event Log detail endpoint `GET /api/v2/eventLogs/{event_log_id}` in Apache Airflow fetched audit The Event Log detail endpoint `GET /api/v2/eventLogs/{event_log_id}` in Apache Airflow fetched audit-log rows directly by numeric ID after only the generic Audit Log permission check, while the collection endpoint `GET /api/v2/eventLogs` applied per-Dag scoping. An authenticated UI/API user with audit-log read permission for one Dag could retrieve a

CVE-2026-40690 [MEDIUM] CWE-1220 CVE-2026-40690: The asset dependency graph did not restrict nodes by the viewer's DAG read permissions: a user with The asset dependency graph did not restrict nodes by the viewer's DAG read permissions: a user with read access to at least one DAG could browse the asset graph for any other asset in the deployment and learn the existence and names of DAGs and assets outside their authorized scope. Users are recommended to upgrade to version 3.2.1, which fixes thi

CVE-2023-47037 [MEDIUM] CVE-2023-47037: We failed to apply CVE-2023-40611 in 2.7.1 and this vulnerability was marked as fixed then. Apache We failed to apply CVE-2023-40611 in 2.7.1 and this vulnerability was marked as fixed then. Apache Airflow, versions before 2.7.3, is affected by a vulnerability that allows authenticated and DAG-view authorized Users to modify some DAG run detail values when submitting notes. This could have them alter details such as configuration parameters, start date, e

CVE-2025-62503 [MEDIUM] CWE-250 CVE-2025-62503: User with CREATE and no UPDATE privilege for Pools, Connections, Variables could update existing rec User with CREATE and no UPDATE privilege for Pools, Connections, Variables could update existing records via bulk create API with overwrite action.

CVE-2024-31869 [MEDIUM] CVE-2024-31869: Airflow versions 2.7.0 through 2.8.4 have a vulnerability that allows an authenticated user to see s Airflow versions 2.7.0 through 2.8.4 have a vulnerability that allows an authenticated user to see sensitive provider configuration via the "configuration" UI page when "non-sensitive-only" was set as "webserver.expose_config" configuration (The celery provider is the only community provider currently that has sensitive configurations). You should migrate t

CVE-2019-12417 [MEDIUM] CWE-79 CVE-2019-12417: A malicious admin user could edit the state of objects in the Airflow metadata database to execute a A malicious admin user could edit the state of objects in the Airflow metadata database to execute arbitrary javascript on certain page views. This also presented a Local File Disclosure vulnerability to any file readable by the webserver process.

CVE-2026-32690 [LOW] CWE-668 CVE-2026-32690: Secrets in Variables saved as JSON dictionaries were not properly redacted - in case thee variables Secrets in Variables saved as JSON dictionaries were not properly redacted - in case thee variables were retrieved by the user the secrets stored as nested fields were not masked. If you do not store variables with sensitive values in JSON form, you are not affected. Otherwise please upgrade to Apache Airflow 3.2.0 that has the fix implemented

CVE-2026-40963 [LOW] CWE-285 CVE-2026-40963: The structure_data endpoint in the Airflow UI returned external dependency graph nodes for linked Da The structure_data endpoint in the Airflow UI returned external dependency graph nodes for linked Dags without checking whether the caller had read permission on those linked Dags. An authenticated UI/API user authorized for one Dag could enumerate linked Dag IDs and dependency metadata for other Dags they were not authorized to read. Affects deploymen

CVE-2026-45426 [LOW] CWE-863 CVE-2026-45426: Exploitation requires the attacker to already be an authenticated Airflow worker holding a valid Log Exploitation requires the attacker to already be an authenticated Airflow worker holding a valid Log-server JWT issued for at least one Dag. Apache Airflow's Log server authorized JWT tokens against Dag IDs by applying Python's `str.lstrip()` to the requested path segment when verifying the JWT's `sub` claim. `str.lstrip()` strips any of a *set* of cha